Getting access forbidden exception while re running the indexer

lakshmi 631 Reputation points
2024-05-17T18:34:58.69+00:00

Hi team,

We have created an index by configuring the document through open ai studio with daily indexer.

2 index got created in ai search with the name we provided and one more with {index name}-index also duplicate indexer is also got created.

From yesterday we are getting access forbidden exceptions while re running the second indexer which got created automatically. Its mapping to the skill set index.

Currently, we are using storage account, open ai and azure search in private network and for local access i have added ip in all these services.

Could anyone help with the reason for the access forbidden error.

Azure AI Search
Azure AI Search
An Azure search service with built-in artificial intelligence capabilities that enrich information to help identify and explore relevant content at scale.
800 questions
Azure OpenAI Service
Azure OpenAI Service
An Azure service that provides access to OpenAI’s GPT-3 models with enterprise capabilities.
2,450 questions
0 comments No comments
{count} votes

Accepted answer
  1. SnehaAgrawal-MSFT 19,436 Reputation points
    2024-05-20T12:17:58.3266667+00:00

    @lakshmi Thanks for reaching here! If you are seeing "access forbidden error" this generic error possible due to firewall block-

    There are two options for allowing indexers to access these resources in such an instance:

    Configure an inbound rule for the IP address of your search service and the IP address range of AzureCognitiveSearch service tag. Details for configuring IP address range restrictions for each data source type can be found from the following links:

    Limitation: IP address range restrictions only work if your search service and your storage account are in different regions.

    In addition to data retrieval, indexers also send outbound requests through skillsets and custom skills.

    For custom skills based on an Azure function, be aware that Azure functions also have IP address restrictions. The list of IP addresses to allow through for custom skill execution include the IP address of your search service and the IP address range of AzureCognitiveSearch service tag.

    Reference- https://learn.microsoft.com/en-us/azure/search/search-indexer-troubleshooting

    Please let us know if issue remains.

    0 comments No comments

0 additional answers

Sort by: Most helpful